Defining Pundit policies without delegating to roles

no_roles.rb

class User
  def roles
    [:manager, :staff]
  end
  
  def has_role?(role)
    roles.include?(role)
  end
end

class UserPolicy < ApplicationPolicy
  def create?
    user.has_role?(:manager)
  end
end